3d-web-experience

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The install.sh script downloads and executes a Node.js setup script from NodeSource (deb.nodesource.com), which is a well-known and standard provider for Node.js distributions.
  • [EXTERNAL_DOWNLOADS]: The install.sh script installs global npm packages (@splinetool/runtime, @gltf-transform/cli) and Python packages (pillow, numpy) from their respective official registries.
  • [COMMAND_EXECUTION]: The skill includes shell scripts for deployment (deploy_to_antigravity.sh) and environment health checks (test.sh), performing routine operations such as directory creation, file copying, and permission management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 08:43 AM